Vulnerabilities

TI-2024-16946 CVE-2024-25763 · GHSA-jrrc-pqj2-c99f

openNDS 10.2.0 is vulnerable to Use-After-Free via /openNDS/src/auth.c.

LOW 25

openNDS 10.2.0 is vulnerable to Use-After-Free via /openNDS/src/auth.c.

CVSS 3.1MEDIUM 5.5 Network Low privileges User interaction EPSS 0.00458 Published 2024-02-26 No fix listed CWE-416

TI-2023-19721 CVE-2023-38323 · GHSA-c69w-p7cc-6h7c

HIGH 82

An issue was discovered in OpenNDS before 10.1.3.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01096 Published 2024-01-26 No fix listed CWE-78

TI-2023-19717 CVE-2023-38319 · GHSA-ppwj-j5xp-6rmh

MEDIUM 45

An issue was discovered in OpenNDS before 10.1.3.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01096 Published 2024-01-26 No fix listed CWE-78

TI-2023-19716 CVE-2023-38318 · GHSA-9cp8-26q6-h5f9

MEDIUM 45

An issue was discovered in OpenNDS before 10.1.3.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01096 Published 2024-01-26 No fix listed CWE-78

TI-2023-19715 CVE-2023-38317 · GHSA-93h3-xr58-xwf6

MEDIUM 51

An issue was discovered in OpenNDS before 10.1.3.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01096 Published 2024-01-26 No fix listed CWE-78

TI-2023-21724 CVE-2023-41102 · GHSA-98jh-839r-xp86

MEDIUM 41

An issue was discovered in the captive portal in OpenNDS before version 10.1.3.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00972 Published 2023-11-17 No fix listed CWE-400

TI-2023-21723 CVE-2023-41101 · GHSA-75j8-mr4c-4x59

MEDIUM 53

An issue was discovered in the captive portal in OpenNDS before version 10.1.3.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01888 Published 2023-11-17 No fix listed CWE-787